Anthropic warns small AI models could spread like worms across smart devices

Key takeaways

• Anthropic warns that small AI models could soon self-replicate across smart devices like fridges and cameras.
• Unlike traditional malware, AI replicators could adapt to unfamiliar devices and lack a central point to shut down.
• The capability is not here yet, but the warning highlights real gaps in IoT device security.
• Most at risk are devices with default passwords, no updates, and no network segmentation.
• Audit your connected devices, change default credentials, and isolate IoT gadgets from core systems.

The development

On October 14, Anthropic published a warning (https://arstechnica.com/security/2026/10/anthropic-warns-small-ai-models-could-self-replicate-through-iot-devices/) that advances in small AI models could enable a new generation of self-replicating malware. The company says these models, which it calls "small weight-based replicators," might be months away from being able to spread autonomously (https://www.theverge.com/ai-artificial-intelligence/1011108/anthropic-self-replicating-ai-smart-devices-risk) across internet-connected devices like smart fridges, vacuum cleaners, security cameras, and thermostats.

The scenario works like this: a compact AI model, small enough to run on everyday smart devices, learns to copy itself from one gadget to another without human help. Unlike traditional malware, which follows a fixed script, the AI could figure out how to infect unfamiliar devices on its own. It would spread slowly, doubling every few days, and would lack a central server to shut down.

Anthropic ran an experiment to test the concept. The results showed significant challenges in making such a replicator work in practice, so the company tempered its warning. Still, the findings raise questions about what happens when capable AI models shrink to fit the billions of low-power devices already in homes and offices.

Why it matters to a business owner

Most business owners have a network of internet-connected devices, from cameras and HVAC systems to point-of-sale terminals and inventory scanners. Many of those gadgets receive irregular security updates, if any. They sit on the same network as your customer data and financial systems.

If self-replicating AI models become real, they would behave differently from the viruses and worms we already know. Traditional malware runs the same code everywhere. An AI replicator could adapt. It could learn the quirks of a device it has never seen before, find a way in, copy itself, and move on. That makes signature-based antivirus tools less useful and containment harder.

The bigger issue is scale. There are billions of IoT devices in the world, and most were not designed with robust security. A slowly spreading AI worm could burrow into devices that IT teams barely monitor. By the time you notice, it may have spread across your building, your vendors' buildings, and your customers' buildings.

Our read is that this warning is part deterrent and part research flag. Anthropic is saying: here is a problem we can see forming, and we want other researchers and policymakers to start thinking about it now, before the models are good enough to make it trivial.

What it does NOT mean

This is not a prediction of SkyNet or rogue AI taking over the world. The models Anthropic describes would still be tools, following goals set by whoever deployed them. The risk is misuse, not sentience.

It also does not mean your smart fridge is going to start plotting against you tomorrow. Anthropic's own experiment hit roadblocks. The capability is not here yet, and it may not arrive on the timeline the company suggests. The warning is forward-looking, not a description of current threats.

Finally, this is not a reason to throw out every connected device you own. The risk is real but manageable if you take basic precautions. The devices most at risk are the ones that never get updated, run default passwords, or sit on unsegmented networks.

A practical next step

Start by auditing the internet-connected devices on your business network. Make a list. For each one, ask:

• Does it still receive security updates from the manufacturer?
• Is it running default credentials?
• Is it segmented from your core data systems?

If you have devices that answer yes to question two or no to questions one and three, prioritize fixing those. Change default passwords. Set up a separate network or VLAN for IoT devices so they cannot reach your financial or customer data. Replace devices that no longer receive updates, or isolate them completely.

Work with your IT team or managed service provider to establish a patching schedule for smart devices, just as you do for computers and servers. Many business owners forget that the thermostat and the camera system need updates too.

Finally, keep an eye on guidance from CISA and your industry regulators. As AI-powered threats evolve, so will the playbooks for defending against them. The scenario Anthropic describes may be months or years away, but the hygiene that protects you from it also protects you from the threats that already exist.